Lucene search
K

4 matches found

Prion
Prion
added 2017/04/25 2:59 p.m.20 views

Sql injection

OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dmbptransition docbase method with a user-created dmprocedure object,...

6.5CVSS8.9AI score0.01633EPSS
Exploits6References3
NVD
NVD
added 2017/04/25 2:59 p.m.14 views

CVE-2017-7221

OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dmbptransition docbase method with a user-created dmprocedure object,...

8.8CVSS8.9AI score0.01633EPSS
Exploits5References3
Cvelist
Cvelist
added 2017/04/25 2:0 p.m.17 views

CVE-2017-7221

OpenText Documentum Content Server has an inadequate protection mechanism against SQL injection, which allows remote authenticated users to execute arbitrary code with super-user privileges by leveraging the availability of the dmbptransition docbase method with a user-created dmprocedure object,...

8.9AI score0.01633EPSS
Exploits5References3
Packet Storm
Packet Storm
added 2017/04/25 12:0 a.m.205 views

OpenText Documentum Content Server SQL Injection

!/usr/bin/env python import socket import sys from os.path import basename from dctmpy.docbaseclient import DocbaseClient from dctmpy.obj.typedobject import TypedObject CIPHERS = "ALL:aNULL:!eNULL" def usage: print "usage:\n\t%s host port user password" % basenamesys.argv0 def main: if lensys.arg...

9CVSS0.4AI score0.03277EPSS
Exploits6
Rows per page
Query Builder